Privacy Policy

1. Information We Collect

Account and authentication information

When you sign in, the App processes the student ID, username, or email address and password you provide. These credentials are sent securely to Heritage School's server for authentication. The App receives an authentication token after a successful login and stores that token using secure storage on the device. The App does not store your password on the device.

Student and school information

Depending on the information maintained by Heritage School and made available to the authorized account, the App may display and process:

• Student name, ID, roll number, class, section, session, shift, and enrollment information;
• Email address, phone number, profile photo, and address;
• Guardian name, relationship, and contact information;
• Attendance records, including attendance status and check-in or check-out information;
• Class routines, teachers, syllabus, and booklist information;
• Exam schedules, marks, grades, results, and related academic records;
• School notices, events, holidays, and academic calendar information; and
• Tuition, invoice, payment status, amount, and receipt information.

Notification information

If you allow notifications, the App collects device notification identifiers, including Expo push tokens and Firebase Cloud Messaging (FCM) registration tokens. These tokens are associated with the authenticated account so Heritage School can send relevant school notices and updates to the device.

Technical information

Our service providers may automatically process limited technical information needed to operate the App, such as device type, operating system, app version, network information, notification delivery data, IP address, and diagnostic or security information.

2. How We Use Information

We use information to:

• Authenticate users and maintain signed-in sessions;
• Provide student profiles, academic records, attendance, routines, results, and school information;
• Send notices, alerts, and push notifications;
• Maintain, secure, troubleshoot, and improve the App and related services;
• Respond to support, privacy, and account requests; and
• Comply with applicable legal, regulatory, safeguarding, and school administration obligations.

We do not sell personal information and do not use student information for third-party advertising.

3. How Information Is Shared

Information may be shared only as necessary with:

• Heritage School personnel and authorized administrators who need the information to provide educational and administrative services;
• Service providers, including hosting, application infrastructure, Expo notification services, and Google Firebase Cloud Messaging, which process information to operate the App;
• Legal or regulatory authorities when disclosure is required by law, necessary to protect safety or rights, or needed to investigate misuse or security incidents; and
• Successor organizations if responsibility for the App or school service is reorganized or transferred, subject to applicable legal requirements.

4. Data Storage and Security

The App communicates with Heritage School services using encrypted HTTPS connections. Authentication tokens are stored using secure device storage where supported. We use reasonable administrative, technical, and organizational safeguards designed to protect information from unauthorized access, loss, misuse, or alteration.

No storage or transmission method is completely secure. Users should protect their login credentials, restrict access to their devices, and notify Heritage School if they believe an account has been compromised.

5. Data Retention

We retain school and student records for as long as reasonably necessary to provide the App, administer educational services, meet legal and recordkeeping requirements, resolve disputes, and maintain security. Retention periods may vary according to the type of record and applicable school policy or law.

Signing out removes the locally stored authentication token from the App, but it does not automatically delete records maintained by Heritage School. Notification tokens may remain on our server until they are replaced, invalidated, removed, or no longer needed.

6. Your Choices and Requests

• You may decline or disable notifications through your device settings.
• You may sign out to remove the App's locally stored authentication token.
• You may contact Heritage School to request access to, correction of, or deletion of personal information, subject to identity verification and applicable educational, legal, and recordkeeping requirements.
• A parent, guardian, or eligible student may submit a privacy or account deletion request using the contact information below.

We may need to retain certain records where deletion is restricted by law or where records are required for legitimate school administration, safeguarding, accounting, dispute resolution, or security purposes.

7. Children's and Students' Privacy

The App is an authenticated school service and may process information about students, including children, for educational and school administration purposes. Access is limited to accounts authorized by Heritage School. The App is not intended for behavioral advertising, and we do not knowingly sell children's personal information.

Parents or guardians with questions about a child's information should contact Heritage School using the details below.

8. Third-Party Services

The App uses services that may process limited information under their own privacy terms:

• Google Firebase: firebase.google.com/support/privacy
• Expo: expo.dev/privacy
• Google Play services: policies.google.com/privacy

9. International Processing

Some service providers may process information on servers located outside your country. Where applicable, we take reasonable steps to ensure that such processing is handled with appropriate safeguards.

10. Changes to This Policy

We may update this Privacy Policy to reflect changes to the App, our practices, or applicable requirements. The updated policy will be posted at this location with a revised effective date. Material changes may also be communicated through the App or another appropriate method.

11. Contact Us

For privacy questions, corrections, or account and data deletion requests, contact: